$ rpki-client -vvf rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft File: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft (raw, json) Hash identifier: 05swdcLcvVhCXZFtDuOp/9b/+Xs7Xau2hRHYP3SuSAc= Subject key identifier: 34:1B:16:C7:BD:74:E8:03:7C:C1:26:83:4B:42:E6:45:78:71:DA:D6 Authority key identifier: 2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C Certificate issuer: /CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Certificate serial: 017B21396258C06CC42F783C2343717157F85592 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 19:10:43 +0000 Manifest this update: Sun 02 Aug 2026 19:05:43 +0000 Manifest next update: Mon 03 Aug 2026 20:11:43 +0000 Files and hashes: 1: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl (hash: e0rSOwHTDHa3fqMv9K6jlHqlM1wmaxFiOLlPIV8VdVk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:7b:21:39:62:58:c0:6c:c4:2f:78:3c:23:43:71:71:57:f8:55:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Validity Not Before: Aug 2 19:05:43 2026 GMT Not After : Aug 3 20:11:43 2026 GMT Subject: CN=341B16C7BD74E8037CC126834B42E6457871DAD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:79:4d:36:5d:e8:cf:e8:05:ec:a5:40:ea:8c: 06:e0:d7:dd:b6:f4:c7:35:47:c2:98:20:5e:44:50: 84:e8:6a:4e:40:23:b4:6c:4c:26:3a:e1:7d:59:7a: 8d:c0:d8:52:59:ff:80:30:14:9e:46:9c:e2:ae:fb: 07:2a:80:24:f6:08:38:63:ed:b9:30:95:9e:14:87: 62:82:01:d0:b1:6d:98:67:0f:fe:2b:1a:96:7e:cb: 45:86:e7:c9:73:63:06:78:52:c6:6d:f0:a1:56:48: 7c:9b:10:ae:ff:9e:bc:96:e4:78:7d:59:bf:87:8b: 15:48:23:09:22:2a:11:f7:0d:bc:7a:63:f1:f4:ab: ba:97:9e:9d:e0:4f:4e:86:57:b4:8e:10:d4:3c:db: d7:0b:f1:35:24:9b:29:23:4c:65:d2:c9:3f:69:74: 31:85:d6:73:2b:85:a6:ce:a8:7e:99:7d:1d:98:ac: cd:44:1d:61:dd:f5:ee:02:66:a3:6d:1f:1f:4e:5a: cc:67:4c:99:c6:13:17:41:01:4a:53:5d:67:28:5d: 86:fc:e9:43:78:eb:11:dd:8b:a0:c3:4b:07:66:c1: 3b:ae:e4:b7:e9:31:34:e9:bd:bd:c2:e3:6b:c2:24: e5:9e:eb:62:d6:ca:4d:e9:dd:b7:29:76:71:ac:a5: 9e:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1B:16:C7:BD:74:E8:03:7C:C1:26:83:4B:42:E6:45:78:71:DA:D6 X509v3 Authority Key Identifier: keyid:2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:84:38:9f:f7:f6:d9:3c:71:0a:a7:20:50:ff:72:f6:ab:46: 05:f1:fb:b5:db:22:58:ef:b4:9c:1d:8d:6f:9a:bc:9e:9a:37: 4c:2f:1a:9f:91:e5:d9:e5:f3:53:2b:bc:94:35:bf:94:96:40: b2:c5:fb:e7:4a:45:e5:30:f1:c6:0c:e2:a2:b1:fc:a7:7b:04: 7c:7d:32:45:07:ac:d4:60:38:27:12:4a:3d:f9:78:1a:03:e8: d6:f8:14:5c:d5:e4:f6:d6:15:e6:f9:c9:9b:7c:e1:ed:4d:b6: de:dd:4e:c9:59:08:82:1a:ce:ef:11:37:5a:0c:ce:ba:d9:04: 34:9a:8f:2b:90:92:dd:c3:28:7e:a2:76:9e:23:f9:83:53:91: f2:9b:f8:3e:57:23:f0:66:08:15:2f:c9:57:18:21:5f:72:a4: ce:f7:01:3e:b8:9f:5b:54:f3:0d:00:7d:c5:10:24:a7:be:31: 47:ad:c5:26:ae:bf:a7:42:b1:45:53:fd:cb:5c:5d:94:65:ed: 3a:de:27:59:d8:4c:e4:7b:b2:78:2f:de:ae:13:a7:a6:16:be: aa:e5:2f:b6:ac:c7:20:d4:f1:87:1d:27:96:4c:24:c1:a0:23: 1f:33:a7:ec:43:c2:5e:e9:2d:00:32:0b:47:ed:c1:69:db:ad: 7f:18:ba:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAXshOWJYwGzEL3g8I0NxcVf4VZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4 ODVBODc3QzAeFw0yNjA4MDIxOTA1NDNaFw0yNjA4MDMyMDExNDNaMDMxMTAvBgNV BAMTKDM0MUIxNkM3QkQ3NEU4MDM3Q0MxMjY4MzRCNDJFNjQ1Nzg3MURBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAeU02XejP6AXspUDqjAbg1922 9Mc1R8KYIF5EUIToak5AI7RsTCY64X1Zeo3A2FJZ/4AwFJ5GnOKu+wcqgCT2CDhj 7bkwlZ4Uh2KCAdCxbZhnD/4rGpZ+y0WG58lzYwZ4UsZt8KFWSHybEK7/nryW5Hh9 Wb+HixVIIwkiKhH3Dbx6Y/H0q7qXnp3gT06GV7SOENQ829cL8TUkmykjTGXSyT9p dDGF1nMrhabOqH6ZfR2YrM1EHWHd9e4CZqNtHx9OWsxnTJnGExdBAUpTXWcoXYb8 6UN46xHdi6DDSwdmwTuu5LfpMTTpvb3C42vCJOWe62LWyk3p3bcpdnGspZ75AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNBsWx7106AN8wSaDS0LmRXhx2tYwHwYDVR0j BBgwFoAULhpL7KGj/q7wx5JO7rRQP4hah3wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDEzNjhhZTMtZGQxMi00YWEzLTg5NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNB MUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4ODVBODc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRTFBNEJFQ0ExQTNGRUFFRjBDNzkyNEVFRUI0NTAzRjg4NUE4 NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUw M0Y4ODVBODc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCEOJ/39tk8cQqnIFD/cvarRgXx+7XbIljv tJwdjW+avJ6aN0wvGp+R5dnl81MrvJQ1v5SWQLLF++dKReUw8cYM4qKx/Kd7BHx9 MkUHrNRgOCcSSj35eBoD6Nb4FFzV5PbWFeb5yZt84e1Ntt7dTslZCIIazu8RN1oM zrrZBDSajyuQkt3DKH6idp4j+YNTkfKb+D5XI/BmCBUvyVcYIV9ypM73AT64n1tU 8w0AfcUQJKe+MUetxSauv6dCsUVT/ctcXZRl7TreJ1nYTOR7sngv3q4Tp6YWvqrl L7asxyDU8YcdJ5ZMJMGgIx8zp+xDwl7pLQAyC0ftwWnbrX8Yuqc= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:55 2026 by rpki-client